Design/Logic Flaw

2023-01-2621:18:00

PRIOn knowledge base

www.prio-n.com

econolite

eos

security flaw

passwordless access

sensitive files

md5 hashes

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.0%

JSON

Econolite EOS versions prior to 3.2.23 lack a password
requirement for gaining “READONLY” access to log files and certain database and
configuration files. One such file contains tables with MD5 hashes and
usernames for all defined users in the control software, including
administrators and technicians.

References

www.cisa.gov/uscert/ics/advisories/icsa-23-026-02